Comment by Animats

> Toggle the switch on the Smallstep RADIUS Root CA to enable Full Trust. The Smallstep RADIUS Root CA is now trusted.

What could possibly go wrong?

How do you do this without trusting some external CA?